Ethics and Compliance in the New World of Intelligence
Intelligent systems are expanding the range of decisions that people and organizations can delegate. They can support research, evaluate information, recommend actions, and increasingly carry out tasks. These capabilities also bring familiar questions into new settings. What makes a decision responsible? Which obligations apply? And how does accountability survive when several people, organizations, and technologies contribute to an outcome?
Ethics and compliance offer connected ways of approaching these questions. Ethics examines the reasons for judging conduct as right, fair, or responsible. Compliance concerns meeting applicable legal, regulatory, contractual, and organizational requirements. Their relationship becomes particularly important when a system’s capabilities develop faster than the practices used to evaluate them.
Judgment Before Automation
Long before artificial intelligence, Aristotle examined the relationship between knowledge, character, and action. In Nicomachean Ethics, moral virtue develops through practice and habituation. Knowing what good conduct involves does not, by itself, establish a pattern of acting well.
Book VI develops the idea of practical wisdom, or phronesis: the capacity to deliberate well about human goods in particular circumstances. Aristotle distinguishes this from technical skill in producing something. Skill can help explain how to achieve an outcome; practical wisdom concerns the judgment involved in choosing and pursuing worthwhile ends. Nicomachean Ethics by Aristotle
This distinction offers a useful lens for modern technology. A system may perform a task accurately while the purpose, context, or consequences of that task remain open to ethical examination. The analogy does not make Aristotle an AI theorist. It invites a question that his work helps illuminate: how much of responsible action depends on capacities beyond technical proficiency?
Computer ethics has explored related questions for decades. In “What Is Computer Ethics?”, James H. Moor (1985) described how computing creates new possibilities for action that existing policies may not adequately address. He called these situations “policy vacuums.” Resolving them requires clarifying the concepts involved and developing justified policies for technology use. cs.ucdavis.edu
Applied to AI, this perspective suggests that identifying a missing rule is only part of the work. Terms such as consent, oversight, fairness, and responsibility may themselves require careful interpretation when systems can infer information or act across multiple services.
From Principles to Organizational Practice
Professional ethics gives these concerns a more concrete form. The Association for Computing Machinery’s Code of Ethics and Professional Conduct places the public good at the center of computing practice. Its principles address harm, honesty, fairness, privacy, confidentiality, and evaluation of systems and their impacts (ACM, 2018). ACM Code of Ethics and Professional Conduct
The Code provides professional ethical guidance. It does not replace applicable law, and citing it does not establish that a particular system is legally compliant. Its value includes directing attention toward people affected by technology, including those who did not choose to use it.
Compliance adds the work of identifying obligations and making them effective in practice. The U.S. Department of Justice’s September 2024 Evaluation of Corporate Compliance Programs asks whether companies assess emerging technology risks, integrate them into broader risk management, establish controls, monitor accountability, and train employees. It specifically discusses AI used in commercial activities and compliance programs (DOJ, 2024, p. 4).
This is prosecutorial evaluation guidance, rather than a general AI statute. Nevertheless, it illustrates how compliance reaches beyond written policies. A program’s significance depends on how it influences decisions, detects problems, and supports corrective action. justice.gov
NIST’s voluntary Artificial Intelligence Risk Management Framework (AI RMF 1.0) offers another organizational perspective. Its GOVERN function connects risk management with policies, responsibilities, organizational values, and continuing review across the AI lifecycle (NIST, 2023). Such a framework can support governance, but adopting it does not automatically establish compliance with every applicable requirement. AIRC
The Human Role in Intelligent Systems
Consider an organization using AI to help evaluate employees. Technical assessment might examine the reliability of its outputs. Compliance review might examine applicable employment, privacy, and contractual obligations. Ethical examination could also ask whether the information used is appropriate, whether employees understand the process, and whether meaningful opportunities exist to challenge an assessment.
These inquiries overlap. An ethical concern may reveal a compliance problem, while a legal requirement may give practical effect to an ethical principle. Neither inquiry can be completed simply by describing the software as intelligent.
The same relationship appears in cybersecurity, financial services, healthcare, and information research. People choose purposes, grant access, set incentives, interpret results, and decide when intervention is necessary. Organizational arrangements influence whether those people have the knowledge, authority, and time to exercise judgment.
An AI system’s recommendation therefore belongs within a wider account of how a decision was made. Who selected the task? What evidence was available? Who could question the result? What happened when a concern was raised?
In the new world of intelligence, ethics and compliance remain connected to human behavior and institutional responsibility. As more tasks become automated, the question of what deserves delegation becomes increasingly consequential. How can organizations preserve thoughtful judgment while developing systems capable of acting with greater speed, reach, and independence?
References
- Aristotle. (n.d.). Nicomachean Ethics (W. D. Ross, Trans.). Internet Classics Archive, MIT. Book II and Book VI.
- Association for Computing Machinery. (2018). ACM Code of Ethics and Professional Conduct. PDF edition.
- Moor, J. H. (1985). “What Is Computer Ethics?” Metaphilosophy, 16(4), 266–275. Full text hosted by UC Davis.
- National Institute of Standards and Technology. (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0). NIST AI 100-1. See also the GOVERN function.
- U.S. Department of Justice, Criminal Division. (2024, September). Evaluation of Corporate Compliance Programs, particularly p. 4 on emerging technologies and AI.
Further Reading
- Bynum, T. (2020 archive edition). “Computer and Information Ethics.” Stanford Encyclopedia of Philosophy. Historical overview of the field.